CVE-2012-2037
CVSS V2 High 9.3
CVSS V3 None
Description
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2034.
Overview
- CVE ID
- CVE-2012-2037
- Assigner
- psirt@adobe.com
- Vulnerability Status
- Analyzed
- Published Version
- 2012-06-09T00:55:01
- Last Modified Date
- 2021-09-08T17:19:28
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
AND | ||||
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | 1 | OR | 11.2.202.235 | |
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* | 0 | OR | ||
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* | 0 | OR | ||
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | 0 | OR | ||
AND | ||||
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | 1 | OR | 11.1.115.8 | |
cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | 0 | OR | 4.0 | 4.4.4 |
AND | ||||
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* | 1 | OR | 11.1.111.9 | |
cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | 0 | OR | 2.0 | 3.2.6 |
AND | ||||
cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:* | 1 | OR | 3.2.0.2070 | |
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* | 0 | OR | ||
cpe:2.3:o:google:android:-:*:*:*:*:*:*:* | 0 | OR | ||
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | 0 | OR | ||
AND | ||||
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:* | 1 | OR | ||
AND | ||||
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:redhat:enterprise_linux_eus:6.2:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.2:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* | 1 | OR |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:M/Au:N/C:C/I:C/A:C
- Access Vector
- NETWORK
- Access Compatibility
- MEDIUM
- Authentication
- NONE
- Confidentiality Impact
- COMPLETE
- Integrity Impact
- COMPLETE
- Availability Impact
- COMPLETE
- Base Score
- 9.3
- Severity
- HIGH
- Exploitability Score
- 8.6
- Impact Score
- 10
References
Reference URL | Reference Tags |
---|---|
http://www.adobe.com/support/security/bulletins/apsb12-14.html | Vendor Advisory |
http://rhn.redhat.com/errata/RHSA-2012-0722.html | Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00007.html | Mailing List Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00006.html | Mailing List Third Party Advisory |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2012-2037 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2037 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2022-05-10 16:07:30 | Added to TrackCVE |